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This listing of claims replaces all prior versions, and 
listings, of claims in the application: 

1. (Currently Amended) A method comprising: 
defining a key and a set of values, the key boing 

dotorminQblo by able to be derived using the values and a 
predefined relationship between the values; 

sending a first value of the set, but not all of the values 
of the set and information encrypted using the key to a server 
for storage; and 

sending a second value of the set, but not all of the 
values of the set to a first delegate, 

wherein the encrypted information is 
accessible with the key, 

inaccessible with the first of the values of the set 
absent the second of the values of the set, and 

inaccessible with the second of the values of the set 
absent the first of the values of the set, 

2. (Previously Presented) The method of claim 1 further 
comprising : 

generating a second set of values, the key being 
determinable by the values of the second set; 
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sending a first but not all of the values of the second set 
to the server; and 

sending a second but not all of the values of the second 
set to a second delegate, 

wherein the encrypted information is 

inaccessible with the first of the values of the 
second set absent the second of the values of the second set, 
and 

inaccessible with the second of the values of the 
second set absent the first of the values of the second set. 

3. (Previously Presented) The method of claim 2 in which 
the values of the second set are also determinable by the 
predefined relationship. 

4. (Original) The method of claim 1 in which the set 
includes exactly two values. 

5. (Original) The method of claim 1 in which the set 
includes three or more values. 

6. (Previously Presented) The method of claim 1 in which 
the first value is associated with a descriptor of the first 
delegate • 
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7. (Previously Presented) The method of claim 1 in which 
the probability of guessing the key correctly using knowledge of 
one or more of the values of the set, but not all the values of 
the set, is the same as the probability of guessing the key 
correctly using no knowledge of any value of the set- 

8. (Previously Presented) The method of claim 7 in which 
the predefined relationship comprises one or more of the Boolean 
XOR function and a relationship that applies an encryption 
algorithm to one value of the set using another value of the set 
as the encryption algorithm key, 

9. (Original) The method of claim 1 in which the 
information comprises medical information, 

10. (Currently Amended) A method comprising: 

storing, on a server accessible through a network, secured 
information and a first access component^ access to the secured 
information requiring a key, the key boing dotorminablo able to 
be derived using the first access component, a second access 
component, and a relationship between the first and second 
access components; 

excluding both the key and the second access component from 
storage on the server; and 
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providing the secured information and the first access 
component to a first requestor, 

11. (Canceled} 

12. (Previously Presented) The method of claim 10 further 
comprising storing a third access component on the server, the 
third access component^ when combined with a fourth access 
component that is excluded from storage on the server, being 
sufficient to permit access to the secured information. 

13. (Original) The method of claim 12 further comprising 
providing the secured information and the third access component 
to a second requestor. 

14. (Original) The method of claim 12 further coit^rising 
deleting the third access component in response to a trigger, 
the trigger being a client instruction, a time limits a request 
from the first requestor, or a security breach, 

15. (Original) The method of claim 12 further comprising 
identifying the requestor and determining that the requestor 
requires the first access component but not the third access 
component . 

16- (Previously Presented) The method of claim 10 further 
comprising storing permission information about a party approved 
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for access, such that the secured information and the first 
access component are only provided if the first requestor is the 
approved party. 

17. (Original) The method of claim 10 in which the 
secured information is secured by encryption using a key^ and 
the first and second access components are related to the key by 
a predefined relationship. 

18. (Currently Amended) A method comprising: 
receiving 

a) from a client, a first access component, 

b) from a server accessible through a network, secured 
information, access to the secured information requiring a key, 
the key being - dQtcrminablo able to be derived using the first 
access component and a second access component, and 

c) from a source other than the client or the server, 
the second access component, 

wherein the encrypted information is 
accessible with the key, 

inaccessible with the first access component absent 
the second access component, and 

inaccessible with the second access component absent 
the first access component. 
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19. (Original) The method of claim 18 in which the source 
is the server. 

20. (Canceled) 

21. (Original) The method of claim 18 in which a third 
access component is required in addition to the first and second 
access components for use of the secured information, 

22. (Original) The method of claim 18 in which the 
secured information, the first access component^ and the second 
access component are received in a digital form. 

23- (Currently Amended) An article comprising a machine- 
readable medium that stores machine-executable instructions, the 
instructions being operable to cause a machine to: 

define a key and a set of values, the key being 
dctc^rminablQ by able to be derived using the values and a 
predefined relationship between the values; 

send a first but not all of the values of the set and 
information encrypted using the key to a server for storage; and 

send a second but not all of the values of the set to a 
first delegate;. 

wherein the encrypted information is 
accessible with the key^ 

inaccessible with the first of the values absent the 
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second of the values, and 

inaccessible with the second of the values absent the 
first of the values. 

24. (Previously Presented) The article of claim 23 in 
which the instructions further cause a machine to: 

generate a second set of values, the key being 
independently determinable by the values of the second set; 

send a first but not all of the values of the second set to 
the server; and 

send a second but not all of the values of the second set 
to a second delegate, 

wherein the encrypted information is 

inaccessible with the first of the values of the 
second set absent the second of the values of the second set, 
and 

inaccessible with the second of the values of the 
second set absent the first of the values of the second set. 

25, (Currently Amended) An apparatus comprising a 
processor and instructions configured to cause the processor to: 

receive, from a client, information and a value of a set of 
values, the information being encrypted using a key, the key 
boing dotorminablc by able to be derived using the values of the 
set and a predefined relationship between the values; 
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Store the information and the value, but not all the values 
of the set; and 

transmit, to a delegate, the information and the value. 

26. (Original) The apparatus of claim 25 in which the 
software is further configured to cause the processor to: 

store a second value that is a member of a second set of 
values, the values of the second set being sufficient to 
determine the key using the predefined relationship. 

27. (Previously Presented) The apparatus of claim 26 in 
which the software is further configured to cause the processor 
to: 

delete or deny access to the second value in response to a 
trigger, the trigger being a client instruction, a time limit, a 
request from the delegate, or a security breach. 

28. (Original) The apparatus of claim 25 in which the 
information comprises medical information. 

29. (Original) A method comprising: 
encrypting information using an encryption key; 
sending the encryption key, but not the encrypted 

information to a first party; 

sending the encrypted information, but not the encryption 
key to a server. 
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30. (Original) The method of claim 29 further comprising 
sending a descriptor of the first party to the server to thereby 
authorize the server to provide the encrypted information to the 
first party. 

31. (Previously Presented) The method of claim 1 further 
comprising sending, to the server, instructions for allowing the 
first delegate to access the first of the values. 

32. (Previously Presented) The method of claim 18, 
further comprising sending authentication information to the 
source other than the client or the server to access the second 
access component. 
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